Re: [HACKERS] Support (was: Democracy and organisation) - Mailing list pgsql-hackers

Is this sort of like Oracle guaranteeing its uncrackable, but as soon as
someone comes to them to prove it is, Oracle's response is "but DBA didn't
enable the obscure security feature that can be found here, that is
disabled by default?"

On Thu, 27 Jun 2002, Tim Hart wrote:

> Could very well be. As I said, I'm not a lawyer. I do know that depending upon the laws in a region, EULAs can be
provento be legally invalid. 
>
> I do personally find it hard to believe that Oracle could be legally immune from *all* damages claims. In practice
provingfault could be very hard to do ( "It was the DBA's fault - incorrect configuration", or "The OS has a bug in
it"),but in general when a fee is paid for a good or service, there is an implied legal contract that at times can
supercedeany EULA. The good or service provider has some legal responsibility for the accuracy of their claims
regardingthe service provided, or the functionality of the project delivered. For example, the only clause that Ford
Motorcompany could use in a sales contract that would absolve them from lemon laws is basically "The product you are
buyingis a lemon". 
>
> Your point is taken, though - I don't think one could succesfully sue Microsoft if Windows crashes from time to time.
However,if M$ promises that product X is a complete COTS datacenter, and you buy X and find that X is nowhere near
stableas the industry norm, you have a legal case - both for the cost of the product and in the resulting lost revenue. 
>
> I probably failed to convey in my initial post that I don't think the scenario is likely. Building and maintaining a
dbapp involves technical talent on the part of the client, reliable hardware, networking, appropriate facilities, blah,
blah,blah. So it's likely that blame can't be placed on one thing - and no single fault is probably large enough to be
outsidethe industry norms for reliability of the product. I was merely trying to convey managements mindset. I feel the
thinkingis flawed as well. 
>
> On Thursday,  27, 2002, at 01:08AM, Christopher Kings-Lynne <chriskl@familyhealth.com.au> wrote:
>
> >Hmmm...
> >
> >I think this is a common fallacy.  It's like arguing that if windoze crashes
> >and you lose important data then you have some sort of legal recourse
> >against Microsoft.  Ever read one of their EULAs?  $10 says that Oracle's
> >license grants them absolute immunity to any kind of damages claim.
> >
> >Chris
> >
> >-------------------
> >
> >Tim Hart Wrote:
> >
> >If a catastrophic software failure results in a high percentage of lost
> >revenue, a corporation might be able to seek monetary compensation from a
> >commercial vendor. They could even be taken to court - depending upon
> >licensing, product descriptions, promises made in product literature, etc.
> >For cases like open source projects, like PostgreSQL, there is no legal
> >recourse available.
> >
> >So - in the extreme case, if commercial Vendor V's database blows chunks,
> >and causes company B to loose a lot of money. If Company B can prove that
> >the fault lies squarely on the shoulders of Vendor V, Company C can sue
> >Vendor V's a** off. Executive management isn't at fault - because they have
> >performed due diligence and have forged a partnership with vendor V who has
> >a legal responsibility for the claims of their product.
> >
> >
> >
>
>
>
>
> ---------------------------(end of broadcast)---------------------------
> TIP 3: if posting/reading through Usenet, please send an appropriate
> subscribe-nomail command to majordomo@postgresql.org so that your
> message can get through to the mailing list cleanly
>
>
>